Privacy Policy

1. Introduction and Commitment

Core Path Analytics (Pty) Ltd ("Core Path Analytics", "we", "us", or "our") is committed to protecting the privacy and personal information of all individuals who interact with our website at www.corepathanalytics.co.za ("Website").

This Privacy Policy explains what personal information we collect, why we collect it, how it is used and stored, and what rights you have in relation to your information. This Policy is drafted in compliance with the Protection of Personal Information Act 4 of 2013 ("POPIA"), which came into full effect on 1 July 2021.

2. Who We Are: The Responsible Party

For the purposes of POPIA, Core Path Analytics (Pty) Ltd is the Responsible Party in respect of personal information collected through the Website.

Core Path Analytics (Pty) Ltd
Registration Number: 2026/364044/07
Email: info@corepathanalytics.co.za
Address: Kimberley, Northern Cape, South Africa

3. Information We Collect

3.1 Contact Form Submissions

When you submit an enquiry through our Contact form, we collect the following personal information:

• Full name
• Email address
• Phone number
• Company or organisation name
• The nature and content of your enquiry

3.2 Quote Requests

When you submit a Quote Request through the Website, we collect:

• Full name and job title
• Company or organisation name
• Email address and phone number
• Industry sector
• Description of project and requirements
• Budget range and project timeline preferences
• Any documents or files you choose to upload in support of your request

3.3 Automatically Collected Technical Information

When you access the Website, certain technical information is automatically collected by our hosting and analytics systems, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system
• Pages visited and time spent on the Website
• Referring URL

This information is collected in aggregate and is generally not linked to individual identities.

4. Lawful Basis for Processing

Under POPIA, we process personal information only where a lawful basis exists. The lawful bases we rely upon are:

• Consent: Where you have voluntarily submitted information through a form or uploaded a document.
• Legitimate interest: To respond to enquiries, manage quote requests, and maintain records of business interactions.
• Contractual necessity: Where processing is required to take steps prior to entering into or fulfilling a contract for Services.
• Legal obligation: Where we are required to retain or process information by law.

5. How We Use Your Information

We use personal information collected through the Website for the following purposes:

• To respond to your enquiries and contact form submissions.
• To review, assess, and respond to Quote Requests.
• To assign and manage internal workflows related to your request.
• To communicate with you regarding our Services, proposals, and project discussions.
• To comply with applicable legal and regulatory obligations.
• To improve the Website and our business processes.

We do not use your personal information for unsolicited marketing without your consent, and we do not sell your personal information to third parties under any circumstances.

6. Sharing of Personal Information

Core Path Analytics does not sell, rent, or trade personal information. We may share personal information only in the following limited circumstances:

• With employees or authorised internal staff who require the information to process your request.
• With trusted third-party service providers who assist us in operating the Website or processing enquiries, subject to confidentiality obligations.
• Where we are required to disclose information by law, court order, or regulatory authority.

All third parties with whom we share personal information are required to handle such information in accordance with POPIA and applicable privacy standards.

7. File Uploads

Where you upload documents or files as part of a Quote Request, these files are stored securely on our servers and are accessible only to authorised Core Path Analytics personnel involved in processing your request. Uploaded files are used solely for the purpose for which they were submitted and are not shared externally without your consent.

You are responsible for ensuring that any files you upload do not contain confidential third-party information that you are not authorised to share, or material that infringes third-party rights.

8. Data Retention

We retain personal information for as long as is reasonably necessary to fulfil the purpose for which it was collected, or as required by applicable law. In general:

• Contact form submissions are retained for a minimum of 12 months from the date of submission.
• Quote Request records are retained for a minimum of 5 years from the date of submission to support potential business relationships and regulatory compliance.
• Uploaded files are retained for the duration of the associated business process and thereafter for a period of 3 years, unless you request earlier deletion.

Upon expiry of the retention period, personal information is securely deleted or anonymised.

9. Security of Personal Information

Core Path Analytics implements reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, or destruction. These measures include secure HTTPS transmission, access controls, server-side security protocols, and restricted internal access.

While we take all reasonable precautions, no method of electronic transmission or storage is completely secure. We cannot guarantee the absolute security of personal information transmitted to or stored by the Website.

10. Your Rights Under POPIA

As a data subject under POPIA, you have the following rights in respect of your personal information:

• Right of access: You may request confirmation of whether we hold your personal information and request a copy.
• Right to correction: You may request that inaccurate, outdated, or incomplete personal information be corrected.
• Right to deletion: You may request the deletion of personal information where it is no longer necessary for the purpose collected, subject to any legal retention obligations.
• Right to object: You may object to the processing of your personal information on grounds relating to your particular situation.
• Right to lodge a complaint: You have the right to lodge a complaint with the Information Regulator of South Africa if you believe your rights under POPIA have been infringed.

To exercise any of these rights, please contact us using the details in Section 13 below.

11. The Information Regulator

If you are not satisfied with how we have handled your personal information, you may contact the Information Regulator of South Africa:

The Information Regulator (South Africa)
Website: www.inforegulator.org.za
Email: inforeg@justice.gov.za
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

12. Changes to this Privacy Policy

Core Path Analytics may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational processes. The updated Policy will be published on the Website with a revised effective date. Continued use of the Website after any changes constitutes acceptance of the updated Policy.

13. Contact Us

For any questions, requests, or concerns relating to this Privacy Policy or the processing of your personal information, please contact:

Core Path Analytics (Pty) Ltd
Attention: Privacy / Information Officer
Email: info@corepathanalytics.co.za
Phone: +27 (0) 60 899 2639
Kimberley, Northern Cape, South Africa